Directory traversal

Multiple directory traversal vulnerabilities in download.php in ISPworker 1.21 allow remote attackers to read arbitrary files via a .. dot dot in the 1 ticketid and 2 filename parameters...

CVE-2007-5813

Multiple directory traversal vulnerabilities in download.php in ISPworker 1.21 allow remote attackers to read arbitrary files via a .. dot dot in the 1 ticketid and 2 filename parameters...

CVE-2007-5813

ISPworker Download.PHP is affected by multiple directory traversal vulnerabilities. The root cause is insufficient sanitation of user input in download.php, enabling remote attackers to read arbitrary files via .. in the ticketid and filename parameters. Affected versions include ISPworker 1.21 a...

ISPworker 1.21 download.php Remote File Disclosure Vulnerability

No description provided by source. ISPworker 1.21 Remote File Disclosure Vulnerability http://ispworker.de/files/ispworker-1.21.tar.gz /module/ticket/download.php?ticketid=../../../../../../../../../etc/passwd%00 /module/ticket/download.php?filename=../../../../../../../../../etc/passwd sebug.net...

ISPworker 1.21 download.php Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================ ISPworker 1.21 download.php Remote File Disclosure Vulnerability ================================================================ ISPworker 1.21 Remote File Disclosure...

ISPworker 1.21 - 'download.php' Remote File Disclosure

ISPworker 1.21 Remote File Disclosure Vulnerability http://ispworker.de/files/ispworker-1.21.tar.gz /module/ticket/download.php?ticketid=../../../../../../../../../etc/passwd%00 /module/ticket/download.php?filename=../../../../../../../../../etc/passwd milw0rm.com 2007-10-31...

ISPworker 1.21 - download.php Remote File Disclosure

ISPworker 1.21 - download.php Remote File Disclosure ISPworker 1.21 Remote File Disclosure Vulnerability http://ispworker.de/files/ispworker-1.21.tar.gz /module/ticket/download.php?ticketid=../../../../../../../../../etc/passwd%00...

CVE-2007-5706

CVE-2007-5706 describes an absolute path traversal vulnerability in the download.php of Jeebles Directory 2.9.60. An attacker can read arbitrary files by supplying a full pathname in the query string. The vulnerability is documented across multiple sources and is classified as a high-severity iss...

Jeebles Directory Local File Inclusion

By hack2prison - vnbrain.net member This is exploit: http://site/path/download.php?file Example: http://site/path/download.php?settings2.inc.php...

jeebles-lfi.txt

By hack2prison - vnbrain.net member This is exploit: http://site/path/download.php?file Example: http://site/path/download.php?settings2.inc.php...

Sql injection

Multiple eval injection vulnerabilities in Php-Stats 0.1.9.2 allow remote authenticated administrators to execute arbitrary code by writing PHP sequences to the php-stats-options record in the options table, which is used in an eval function call by 1 admin.php, 2 click.php, 3 download.php, and...

CVE-2007-5453

Multiple eval injection vulnerabilities in Php-Stats 0.1.9.2 allow remote authenticated administrators to execute arbitrary code by writing PHP sequences to the php-stats-options record in the options table, which is used in an eval function call by 1 admin.php, 2 click.php, 3 download.php, and...

CVE-2007-5453

CVE-2007-5453 concerns Php-Stats 0.1.9.2, which contains multiple eval-injection vulnerabilities. The issue allows remote authenticated administrators to execute arbitrary code by injecting PHP sequences into the php-stats-options record in the _options table, which is subsequently evaluated via ...

Unfixed XSS vulnerability at www.vicman.net

Security researcher MaXWeL, has submitted on 10/03/2007 a cross-site-scripting XSS vulnerability affecting www.vicman.net, which at the time of submission ranked 6003 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2007. It is currently...

chupix-file.txt

Chupix CMS 0.2.3 download.php Remote File Download Vulnerability P.Script : http://sourceforge.net/project/showfiles.php?groupid=134930 download.php Lain:18-57 - ifisset$GET'fichier' ", "", $result; $num = trim$result; else $num = 0; $num++; $msg = ""; if!isdir$repertoire mkdir $repertoire, 0755;...

Chupix CMS 0.2.3 (download.php) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Chupix CMS 0.2.3 download.php Remote File Disclosure Vulnerability ==================================================================== Chupix CMS 0.2.3 download.php Remo...

Chupix CMS 0.2.3 (download.php) Remote File Disclosure Vulnerability

No description provided by source. Chupix CMS 0.2.3 download.php Remote File Download Vulnerability P.Script : http://sourceforge.net/project/showfiles.php?groupid=134930 download.php Lain:18-57 - ifisset$GET'fichier' --------------XXXX // téléchargement du fichier $file = "archives/"...

CVE-2007-2507

CVE-2007-2507 describes a directory traversal vulnerability in the Treble Designs 1024 CMS 0.7. The flaw exists in includes/download.php and allows remote attackers to read arbitrary files by providing a ../ sequence in the item parameter. The issue affects Treble Designs 1024 CMS 0.7 and enables...

USP FOSS Distribution 1.01(download.php dnld)Remote File Disclosure

USP FOSS Distribution 1.01download.php dnldRemote File Disclosure D.Script: http://norcalvex.org/pagode/uspfossv101.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Dork:intitle:USP FOSS Distribution V.Code In /user/download.php: /user/download.php ? $file = @$GET'dnld';----+...

USP FOSS Distribution 1.01 (dnld) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ====================================================================== USP FOSS Distribution 1.01 dnld Remote File Disclosure Vulnerability ====================================================================== USP FOSS Distribution...